Skip to main content
NY.gov Portal State Agency Listing

ITS Policies

Statewide technology policies and guidelines set standards and define best practices for the State's IT community. All statewide technology policies are available by category and can be ordered by number, date published, and date modified date.

 

A complete listing of defined terms for NYS Information Technology Policies, Standards, and Best Practice Guidelines is available in the "NYS Information Technology Policies, Standards, and Best Practice Guidelines Glossary"

 

More information about the process for establishing NYS policies is available in the Process for Establishing Enterprise Information Technology Standards(NYS-P09-002) and also located in the Development of Enterprise IT Policies (NYS-P09-003). To request an archived policy, contact policy@its.ny.gov.

 


Category Date Published Last Updated No. Titlesort icon
Procurement April 17, 1998 April 17, 1998 98-3 Technology Acquisitions Review Procedures and Guidelines (HTM)
Web and Digital Government August 1, 2005 November 14, 2012 S05-001 State Common Web Banner (WORD)
Web and Digital Government August 1, 2005 December 28, 2010 S05-001 State Common Web Banner (PDF)
Technology Development/Use March 9, 2009 July 27, 2011 P09-001 State Agency Use of Supercomputing Resources (PDF)
Privacy October 15, 2009 March 29, 2012 P09-004 Social Security Number (SSN) Initiative: Remediation Policy on Printing Full SSNs (PDF)
Web and Digital Government October 20, 2011 November 14, 2012 NYS-P11-001 Social Media Policy (PDF)
Security February 21, 2014 February 21, 2014 NYS-S14-005 Security Logging Standard (WORD)
Security February 21, 2014 February 21, 2014 NYS-S14-005 Security Logging Standard (PDF)
Security May 10, 2010 May 16, 2014 NYS-G10-001 Secure Use of Social Media Guideline (WORD)
Security May 10, 2010 May 16, 2014 NYS-G10-001 Secure Use of Social Media Guideline (PDF)
Security October 18, 2013 October 17, 2014 NYS-S13-001 Secure System Development Life Cycle Standard (WORD)
Security October 18, 2013 October 17, 2014 NYS-S13-001 Secure System Development Life Cycle Standard (PDF)
Security April 18, 2014 April 18, 2014 NYS-S14-008 Secure Configuration Standard (Word)
Security April 18, 2014 April 18, 2014 NYS-S14-008 Secure Configuration Standard (PDF)
Security October 18, 2013 October 17, 2014 NYS-S13-002 Secure Coding Standard (WORD)
Security October 18, 2013 October 17, 2014 NYS-S13-002 Secure Coding Standard (PDF)
Security October 18, 2013 October 17, 2014 NYS-S13-003 Sanitization/Secure Disposal Standard (WORD)
Security October 18, 2013 October 17, 2014 NYS-S13-003 Sanitization/Secure Disposal Standard (PDF)
Electronic Records May 1, 2004 December 20, 2013 G04-001 Revised Electronic Signatures and Records Act (ESRA) Guidelines (WORD)
Electronic Records May 1, 2004 December 20, 2013 G04-001 Revised Electronic Signatures and Records Act (ESRA) Guidelines (PDF)
Security April 18, 2014 April 18, 2014 NYS-S14-010 Remote Access IT Standard (Word)
Security April 18, 2014 April 18, 2014 NYS-S14-010 Remote Access IT Standard (PDF)
IT Standards October 1, 2009 June 1, 2010 P09-002 Process for Establishing Enterprise Information Technology Standards (PDF)
IT Standards March 1, 2004 March 1, 2004 P04-001 Principles Governing the New York State Information Technology Enterprise Architecture (PDF)
Procurement April 1, 2008 July 12, 2010 P08-001 Plan to Procure (WORD)
Procurement April 1, 2008 July 12, 2010 P08-001 Plan to Procure (PDF)
Technology Development/Use April 17, 1998 August 30, 2011 NYS-P98-003 NYS-P98-003 Date/Time Conversion Contract Language Policy (PDF)
Privacy August 7, 2010 December 20, 2013 NYS-P10-004 NYS-P10-004 Guidance for the Use of SSNs by State Government Entities (Word)
Privacy August 7, 2010 December 20, 2013 NYS-P10-004 NYS-P10-004 Guidance for the Use of SSNs by State Government Entities (PDF)
Network Services April 3, 2003 April 3, 2003 P03-001 NYS Directory Services - Directory Account Management (PDF)
Network Services December 28, 1997 November 27, 2012 S97-008 NYeNet IP Addressing (WORD)
Network Services December 28, 1997 November 27, 2012 S97-008 NYeNet IP Addressing (PDF)
Security April 18, 2014 April 18, 2014 NYS-S14-009 Mobile Device Security Standard (Word)
Security April 18, 2014 April 18, 2014 NYS-S14-009 Mobile Device Security Standard (PDF)
Web and Digital Government August 24, 2007 November 27, 2012 S07-001 Mandatory Technology Standard on Webcasting Open Meetings (WORD)
Web and Digital Government August 24, 2007 November 27, 2012 S07-001 Mandatory Technology Standard on Webcasting Open Meetings (PDF)
IT Standards June 17, 2002 October 9, 2009 G02-001 Internet Privacy Guideline (WORD)
IT Standards June 17, 2002 October 9, 2009 G02-001 Internet Privacy Guideline (PDF)
Security January 17, 2014 January 17, 2014 NYS-S14-001 Information Security Risk Management Standard (WORD)
Security January 17, 2014 January 17, 2014 NYS-S14-001 Information Security Risk Management Standard (PDF)
Security April 18, 2003 October 17, 2014 NYS-P03-002 Information Security Policy (WORD)
Security April 18, 2003 October 17, 2014 NYS-P03-002 Information Security Policy (PDF)
Security October 18, 2013 October 18, 2013 NYS-P13-001-A Information Security Exception Request Form (PDF)
Security October 18, 2013 September 19, 2014 NYS-P13-001 Information Security Exception Policy (Word)
Security October 18, 2013 September 19, 2014 NYS-P13-001 Information Security Exception Policy (PDF)
Security October 10, 2008 January 17, 2014 NYS-S14-003-A Information Security Controls Standard, Appendix A (XLS)
Security October 10, 2008 January 17, 2014 NYS-S14-003 Information Security Controls Standard (PDF)
Security October 10, 2008 September 19, 2014 NYS-S14-002 Information Classification Standard (Word)
Security October 10, 2008 September 19, 2014 NYS-S14-002 Information Classification Standard (PDF)
Security October 18, 2013 September 19, 2014 NYS-S13-004 Identity Assurance Standard (Word)
Security October 18, 2013 September 19, 2014 NYS-S13-004 Identity Assurance Standard (PDF)
Security October 5, 2010 September 19, 2014 NYS-P10-006 Identity Assurance Policy (Word)
Security October 5, 2010 September 19, 2014 NYS-P10-006 Identity Assurance Policy (PDF)
Privacy July 22, 2002 July 22, 2002 G02-001 Guidelines for Internet Privacy Policies (PDF)
GIS July 17, 1997 May 1, 2010 P10-003 GIS Data Sharing (PDF)
GIS September 17, 1996 May 1, 2010 P10-002 Geographic Information Systems (PDF)
Web and Digital Government November 16, 2010 November 16, 2010 NYS-P08-005 FAQ for Accessibility Compliance Reporting
Technology Development/Use April 11, 2014 April 11, 2014 NYS-S14-011 Enterprise Mobile Management Technical Standard (WORD)
Technology Development/Use April 11, 2014 April 15, 2014 NYS-S14-011 Enterprise Mobile Management Technical Standard (PDF)
Security March 21, 2014 March 21, 2014 NYS-S14-007 Encryption Standard (WORD)
Security March 21, 2014 March 21, 2014 NYS-S14-007 Encryption Standard (PDF)
Electronic Records April 1, 1996 April 1, 1996 96-7 Electronic Data Interchange (PDF)
Web and Digital Government May 17, 2010 November 27, 2012 P08-003 Domain Names for State Government Entities (Word)
Web and Digital Government May 17, 2010 November 27, 2012 P08-003 Domain Names for State Government Entities (PDF)
Policy Development October 1, 2009 October 1, 2009 P09-003 Development of Enterprise IT Policies (PDF)
Security November 18, 2013 November 18, 2013 NYS-S13-005 Cyber Incident Response Standard (Word)
Security November 18, 2013 November 18, 2013 NYS-S13-005 Cyber Incident Response Standard (PDF)
Security February 12, 2010 May 16, 2014 NYS-S10-001 CPE Requirements for ISOs/Designated Security Representatives Standard (WORD)
Security February 12, 2010 May 16, 2014 NYS-S10-001 CPE Requirements for ISOs/Designated Security Representatives Standard (PDF)
Web and Digital Government August 22, 2005 November 14, 2012 S05-002 Contact Web Page (WORD)
Web and Digital Government August 22, 2005 August 22, 2005 S05-002 Contact Web Page (PDF)
Security February 21, 2014 February 21, 2014 NYS-S14-004 Collaborative Computing Device Standard (Word)
Security February 21, 2014 February 21, 2014 NYS-S14-004 Collaborative Computing Device Standard (PDF)
Technology Development/Use April 11, 2014 April 15, 2014 NYS-S14-012 Bring Your Own Device (BYOD) (WORD)
Technology Development/Use April 11, 2013 April 15, 2014 NYS-S14-012 Bring Your Own Device (BYOD) (PDF)
Web and Digital Government April 11, 2007 November 27, 2012 G07-002 Best Practice Guideline on Webcasting Open Meetings (WORD)
Web and Digital Government April 11, 2007 November 27, 2012 G07-002 Best Practice Guideline on Webcasting Open Meetings (PDF)
Policy Development January 14, 2009 April 29, 2011 P08-002 Authority to Establish State Enterprise Information Technology (IT) Policy, Standards and Guidelines (PDF)
Security March 21, 2014 August 15, 2014 NYS-S14-006 Authentication Tokens Standard (WORD)
Security March 21, 2014 August 15, 2014 NYS-S14-006 Authentication Tokens Standard (PDF)
Web and Digital Government March 25, 2010 March 25, 2010 P10-001 Advertisements, Endorsements and Sponsorships on State Entity Websites (WORD)
Web and Digital Government March 25, 2010 March 25, 2010 P10-001 Advertisements, Endorsements and Sponsorships on State Entity Websites (PDF)
Security August 15, 2014 August 15, 2014 NYS-S14-013 Account Management / Access Control Standard (Word)
Security August 15, 2014 August 15, 2014 NYS-S14-013 Account Management / Access Control Standard (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Spanish (Word)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Spanish (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Russian (Word)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Russian (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Korean (Word)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Korean (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Italiano (Word)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Italiano (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Haitian Creole (Word)
Web and Digital Government June 21, 2004 September 12, 2011 P08-005 Accessibility of Web-Based Information and Applications – Haitian Creole (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Chinese (Word)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications – Chinese (PDF)
Web and Digital Government May 17, 2010 November 14, 2012 P08-005 Accessibility of Web-Based Information and Applications (PDF)
Web and Digital Government September 10, 2010 October 20, 2010 P08-005 Accessibility of Web-Based Information & Applications Compliance Reporting (PDF)
Web and Digital Government September 10, 2010 October 20, 2010 P08-005 Accessibility of Web-Based Information & Applications Compliance Reporting (PDF MEMO)
Security January 17, 2014 March 21, 2014 NYS-P14-001 Acceptable Use of Information Technology (IT) Resources Policy (Word)
Security January 17, 2014 March 21, 2014 NYS-P14-001 Acceptable Use of Information Technology (IT) Resources Policy (PDF)
Web and Digital Government October 20, 2010 November 16, 2010 NYS-P08-005 2010 NYS Accessibility Coordinator Listing